bugfix: uploading was horribly broken

we need more tests!
typo
made href UNIQUE

changed vcards would not be updated, instead a new one would be inserted
into the tabl
added to TODO